4 • 



What Is Claimed Is: 



1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 

1 

2 
3 
4 
5 

1 

2 
3 



1 . A method for providing concurrency control for a policy-based 
management system that controls resources in a distributed computing system, the 
method comprising: I 

receiving a request to perform an operation on a lockable resource from a 
controller in the distributed computing system; 

wherein the controller sends the request in order to enforce a first policy 

buted computing system; 
troller holds a lock on the lockable resource; 



for controlling resources in the distr 
determining whether the cor 



allowing the controller to e> ecute the operation on the lockable resource if 
the controller holds the lock on the lockable resource; 

allowing the controller to acquire the lock if the controller does not hold 
the lock on the lockable resource; ajpd 

allowing the controller to execute the operation on the lockable resource if 
the controller acquires the lock. 



2. The method of clai 
command resources in the distributi 



1, wherein the first policy is configured to 
d computing system to perform actions so that 
the distributed computing system operates in accordance with a rule that is 
enforced by the first policy, wherein the rule governs behavior of resources within 
the distributed computing system. 



3 . The method of claim 
if the controller does not hold the locfk 
controller does not acquire the lock, 



1, further comprising thf€|wing an exception 
on the lockable resource and-if the 
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1 4. The method of claim 1 

2 resource expires after a pre-specified 

3 within the pre-specified lease period 
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1 5. The method of claim 

2 resource within the distributed 



wherein the lock held on the lockable 
ease period, unless the lease is renewed 



I, wherein the lockable resource includes a 
computing system. 



6. The method of claim 



1. wherein the lockable resource includes a 



2 second policy for controlling resources in the distributed computing system. 

1 7. The method of claim 1, wherein the controller includes a client in 

2 the distributed computing system. 



1 8 . The method of clairi l 

2 policy for controlling resources in the 



1, wherein the controller includes the first 
distributed computing system. 



The method of claini 1, wherein the controller includes a higher- 
level policy for controlling resourceb in the distributed computing system, and 
wherein the lockable resource includes a lower-level policy for controlling 
resources in the distributed computing system. 



1 0. The method of claim 
the lock includes allowing the controller 
allocates locks to controllers. 



1, wherein allowing the controller to acquire 
to acquire the lock from a resource that 
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1 11. The method of 

2 or more independent locks jm? 

3 resource. 
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8 for controlling resources in the dis 




rein the lockable resource presents one 
fcess to independent sub-units of the 



12. A computer-readal )le storage medium storing instructions that 
when executed by a computer cai se the computer to perform a method for 
providing concurrency control foi a policy-based management system that 
controls resources in a distributed computing system, the method comprising: 

receiving a request to perfc rm an operation on a lockable resource from a 
controller in the distributed compi ting system; 

wherein the controller senc s the request in order to enforce a first policy 

ributed computing system; 
determining whether the controller holds a lock on the lockable resource; 
allowing the controller to execute the operation on the lockable resource if 

lockable resource; 

squire the lock if the controller does not hold 



the controller holds the lock on th< 
allowing the controller to a 



13 the lock on the lockable resource; 2nd 



allowing the controller to e; 
the controller acquires the lock. 



cecute the operation on the lockable resource if 



13. The computer-readable storage medium of claim 12, wherein the 
first policy is configured to command resources in the distributed computing 
system to perform actions so that tl e distributed computing system operates in 
accordance with a rule that is enfor ;ed by the first policy, wherein the rule 
governs behavior of resources within the distributed computing system. 
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1 14. The computer-readabfe storage medium of claim 12, wherein the 

2 method further comprises throwing an exception if the controller does not hold 

3 the lock on the lockable resource arid if the controller does not acquire the lock. 
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1 5 . The computer-read 
held by the controller expire after 
renewed within the pre-specified 



ible storage medium of claim 12, wherein locks 
a pre-specified lease period, unless the lease is 
ease period. 



provides concurrency control within a policy- 
ntrols resources in a distributed computing 



16. An apparatus that 
based management system that c< 
system, the apparatus comprising! 

a receiving mechanism that receives a request to perform an operation on a 
lockable resource from a controller in the distributed computing system; 

wherein the controller sends the request in order to enforce a first policy 
for controlling resources in the disi ributed computing system; 

a determining mechanism t lat determines whether the controller holds a 
lock on the lockable resource; 

an execution mechanism ths t is configured to, 

allow the controller to acquire the lock if the controller 



does not hold the loc e 



allow the con roller to execute the operation on the lockable 



resource if the contro 



on the lockable resource, and to 



er holds the lock on the lockable resource. 



1 7 . The apparatus of claim 
command resources in the distributed 
the distributed computing system ope 



16, wherein the first policy is configured to 
computing system to perform actions so that 
•ates in accordance with a rule that is 
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4 enforced by the first policy, whereiij the rule governs behavior of resources within 

5 the distributed computing system. 



1 18. The apparatus of claim 16, wherein the execution mechanism is 

2 configured to throw an exception if the controller does not hold the lock on the 

3 lockable resource and if the controller does not acquire the lock. 
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19. The apparatus of claim 16, wherein the lock on the lockable 
resource expires after a pre-snecified lease period, unless the lease is renewed 

period. 



within the pre-specified lease 



20. The apparatus 



of claim 16, wherein the lockable resource includes 



2 a resource within the distributed computing system 



1 21. The apparatus 

2 a second policy for controllin 



of claim 16, wherein the lockable resource includes 
g resources in the distributed computing system. 



1 22. The apparatus of claim 16, wherein the controller includes a client 

2 in the distributed computing system. 



1 23. The apparatus of claim 16, wherein the controller includes the first 

2 policy for controlling resourceslin the distributed computing system. 



1 24. The apparatus of 'claim 16, wherein the controller includes a 

2 higher-level policy for controlling resources in the distributed computing system, 

3 and wherein the lockable resource includes a lower-level policy for controlling 

4 resources in the distributed computing system. 
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1 25. The apparatus of c 

2 configured to allow the controller 

3 allocates locks to controllers. 



aim 16, wherein the execution mechanism is 
to acquire the lock from a resource that 



1 26. The apparatus of 

2 one or more independent lock 

3 resource. 




herein the lockable resource presents 
access to independent sub-units of the 



17 

Attorney Docket No. SUN-P4061-JTF Inventor: William H. Connor 

ARPC:\MY DOCUMENTS\SUN MICROSYSTEMS\SUN-P4061-JTIASUN-P4061-JTF APPLICATION. DOC 



